Oneboxing google drive videos does not work

We make active use of google drive in my organization, and would like to encourage sharing of screencasts and webinar recordings using google drive via discourse. I just attempted this and it does not onebox properly.

Am I doing this wrong, or can oneboxing of google drive videos be considered as a new feature? It seems to me that this should be possible via these steps:

  • upload video to drive, wait for it to process
  • share video with public (“anyone on the internet can find and view”)
  • get embed code
  • paste URL from embed code on its own line in discourse post
1 Like

Does Google Drive support oEmbed or Open Graph summaries of its content?

This is a bit like dumping a video in Dropbox and expecting it to be YouTube? It’s a file sharing service, not a video site…

I don’t know about oEmbed or Open Graph summaries, but drive supports embedding videos and provides embed code to copy and paste into web pages.

Are these public URLs? Remember that onebox is an anonymous user, so it won’t work with anything that requires auth, and that’s by design.

(Most YouTube videos are viewable to anyone, for example… because it’s a video sharing service, not file storage.)

yeah they are public

Well, a raw video file works:

Can you copy/paste the embed code into a code block here? Chances are you will have to have a plugin that whitelists the tags they use.

<iframe src="" width="640" height="480"></iframe>

that’ll do it.

More info:

If you whitelist for onebox, it does attempt to load it, but for me it is throwing a error regarding SAMEORIGIN (then use the src attribute URL in your post)

Refused to display '' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

I’m unsure how to get past that.

1 Like

I just tried the information at

And the onebox shows the oembed data, but posting it still results in a blank post with the above error in the dev console. I feel like I’m closer, but it still isn’t quite right.


It’s because needs to unset that header, not your site.

Ah. Okay, so that is why it is getting tricky. I figured it must be somewhere else, but I lost time to dig into it. Thanks for taking a quick look.

Looks like embedding videos hosted on google drive is working now, including the example I gave above. Taking the UrL on its own will create a onebox. But I just came across a problem with embedding .aac audio hosted on google drive - it will not onebox correctly. Anyone have any ideas what’s going on and can it be fixed?

update: ah, well… the video appears to display in the preview but not in the final post after saving.

aac file url:

image url:

1 Like
Refused to display 
in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'.

The Preview is an <img> not an <iframe>

let me try a different URL - this is the link I get directly from google drive. Also appears not to work as onebox. I’m just not an expert at this. :confused:

It’s a security thing

That returns a Response Header

alt-svc:quic=":443"; ma=2592000; v="35,34"
cache-control:no-cache, no-store, max-age=0, must-revalidate
content-type:text/html; charset=utf-8
date:Tue, 31 Jan 2017 19:45:19 GMT
expires:Mon, 01 Jan 1990 00:00:00 GMT
x-robots-tag:noindex, nofollow, nosnippet
x-xss-protection:1; mode=block


The page can only be displayed in a frame on the same origin as the page itself.


I just ran into this limitation myself, but it’s possible. You’ll have to whitelist the iframe source domain in allowed iframes.

Then grab the Embed item HTML which will look like this:

<iframe src="" width="640" height="480"></iframe>

If working with a Share with others link, it will look like this:

so you’ll have to replace /view?usp=sharing with /preview for the iframe to work.